$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EQo27bcjIa-9TZyQ3GWP3WyTnPQ.roa File: EQo27bcjIa-9TZyQ3GWP3WyTnPQ.roa (raw, json) Hash identifier: XvUYdUPQjV+aBz0JOvn55xa39ArSuwdNuj/6s+DLLi0= Subject key identifier: 11:0A:36:ED:B7:23:21:AF:BD:4D:9C:90:DC:65:8F:DD:6C:93:9C:F4 Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Certificate serial: 08FE Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EQo27bcjIa-9TZyQ3GWP3WyTnPQ.roa Signing time: Tue 30 Apr 2024 02:26:39 +0000 ROA not before: Tue 30 Apr 2024 02:26:39 +0000 ROA not after: Tue 15 Apr 2025 01:30:02 +0000 asID: 9605 IP address blocks: 49.98.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 05:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2302 (0x8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473 Validity Not Before: Apr 30 02:26:39 2024 GMT Not After : Apr 15 01:30:02 2025 GMT Subject: CN=110A36EDB72321AFBD4D9C90DC658FDD6C939CF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:48:4a:fd:a6:66:ac:07:0e:4c:00:3b:7a:50: ad:0e:7e:be:f6:61:7a:ea:78:e5:03:34:9a:bd:59: 4a:7a:ae:96:43:8b:1a:c1:52:aa:af:2d:fd:6e:ee: a6:a2:97:5e:64:76:03:04:4b:01:db:e4:02:83:3d: 39:c1:19:36:23:9e:60:a1:12:5a:e4:b9:7b:5f:da: 67:aa:b8:17:c2:90:84:3f:ab:78:4e:07:b7:56:79: b3:11:a7:03:35:29:bb:57:b3:00:37:6a:98:30:2c: 01:01:ed:87:c8:9f:a9:e9:cd:6c:ef:0a:af:9c:3a: 2f:c2:0c:62:a0:ed:b9:73:22:3b:c3:68:49:b4:1f: 2a:32:8d:58:0d:3a:33:54:b7:cf:34:1a:92:b6:9d: 34:19:2d:b4:77:f5:81:32:0e:58:61:98:79:40:21: 8a:61:40:cc:c1:83:13:7a:b4:88:16:46:24:ca:f5: fb:e4:bf:17:58:b8:78:28:c4:7c:99:b8:8a:4b:ec: bf:ff:07:f0:4e:bb:cf:fc:b0:74:07:60:13:34:7e: be:dc:e1:0d:81:c2:79:30:e8:52:32:f1:a0:39:28: 02:a2:e8:2f:80:05:9d:9c:25:13:b0:a0:b5:c6:ce: 9e:f6:5f:fa:03:74:86:77:ae:b1:bf:3b:4d:73:d4: d8:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0A:36:ED:B7:23:21:AF:BD:4D:9C:90:DC:65:8F:DD:6C:93:9C:F4 X509v3 Authority Key Identifier: keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EQo27bcjIa-9TZyQ3GWP3WyTnPQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.98.172.0/22 Signature Algorithm: sha256WithRSAEncryption c2:ac:f1:6a:5c:c4:4a:cd:fc:aa:e8:96:bc:c1:73:ba:d2:ed: 6d:cd:65:ee:c5:d2:b8:4c:0e:0a:a1:1d:05:46:61:37:e4:95: 3b:98:da:cc:eb:e7:77:68:9a:2d:46:27:8a:03:d1:8e:1a:00: b3:9d:e7:77:ba:40:9c:36:b6:d5:b1:7a:29:31:31:f6:e5:60: 87:2b:57:f4:e8:1b:df:d7:fc:b2:8d:74:7b:4c:01:7b:4f:7c: 05:b3:76:aa:9a:42:08:78:ac:07:28:5f:42:38:6e:2b:d2:9e: 8e:3e:83:66:38:1d:df:ab:3f:c2:22:bd:00:5e:dd:49:6b:c6: 86:af:31:3f:9f:d9:14:fa:db:be:39:cd:11:e5:97:0d:8e:4f: 2b:c7:63:c1:28:b3:5f:e5:00:6a:0f:0c:e5:bf:79:6e:0c:d3: 0c:b5:3d:f6:80:09:82:6e:15:50:d4:26:1b:bb:1b:b8:1b:59: e3:85:b4:50:3a:a7:26:1a:76:e7:87:8c:5d:1f:ce:96:14:ea: 56:94:85:ea:d4:e9:29:02:83:ed:6f:63:95:dd:4f:60:d9:b8: 0a:a2:bc:66:07:46:01:63:5a:91:d5:9a:2e:e8:4c:b0:f8:0b: a9:37:5c:b4:fa:0c:41:b6:86:6c:3a:ab:8c:fa:1d:99:de:f6: ca:b4:de:1f -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2 NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw MjI2MzlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDExMEEzNkVEQjcyMzIx QUZCRDREOUM5MERDNjU4RkRENkM5MzlDRjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDESEr9pmasBw5MADt6UK0Ofr72YXrqeOUDNJq9WUp6rpZDixrB UqqvLf1u7qail15kdgMESwHb5AKDPTnBGTYjnmChElrkuXtf2mequBfCkIQ/q3hO B7dWebMRpwM1KbtXswA3apgwLAEB7YfIn6npzWzvCq+cOi/CDGKg7blzIjvDaEm0 HyoyjVgNOjNUt880GpK2nTQZLbR39YEyDlhhmHlAIYphQMzBgxN6tIgWRiTK9fvk vxdYuHgoxHyZuIpL7L//B/BOu8/8sHQHYBM0fr7c4Q2Bwnkw6FIy8aA5KAKi6C+A BZ2cJROwoLXGzp72X/oDdIZ3rrG/O01z1NhDAgMBAAGjggIkMIICIDAdBgNVHQ4E FgQUEQo27bcjIa+9TZyQ3GWP3WyTnPQwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B OTFBNzM4MTAwMDAvMzA5L0VRbzI3YmNqSWEtOVRaeVEzR1dQM1d5VG5QUS5yb2Ew RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAIxYqwwDQYJKoZIhvcNAQELBQADggEBAMKs8WpcxErN/KrolrzBc7rS7W3N Ze7F0rhMDgqhHQVGYTfklTuY2szr53domi1GJ4oD0Y4aALOd53e6QJw2ttWxeikx MfblYIcrV/ToG9/X/LKNdHtMAXtPfAWzdqqaQgh4rAcoX0I4bivSno4+g2Y4Hd+r P8IivQBe3UlrxoavMT+f2RT62745zRHllw2OTyvHY8Eos1/lAGoPDOW/eW4M0wy1 PfaACYJuFVDUJhu7G7gbWeOFtFA6pyYadueHjF0fzpYU6laUherU6SkCg+1vY5Xd T2DZuAqivGYHRgFjWpHVmi7oTLD4C6k3XLT6DEG2hmw6q4z6HZne9sq03h8= -----END CERTIFICATE-----Generated at Sun Feb 16 22:20:11 2025 by rpki-client